$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/86d0cd8f-3c69-484d-bdba-26b289300215.roa File: 86d0cd8f-3c69-484d-bdba-26b289300215.roa (raw, json) Hash identifier: BEG4Aml+qAbaH+IESlTGBCqMznvULzoqDKJWqH8365w= Subject key identifier: BB:A9:B6:D5:BC:89:3D:46:60:0E:08:98:EE:D6:C4:A0:50:03:D9:86 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4FF6443EDDB65483C38FCB8259E552BEC1453E71 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/86d0cd8f-3c69-484d-bdba-26b289300215.roa Signing time: Sat 18 Oct 2025 20:03:34 +0000 ROA not before: Sat 18 Oct 2025 20:03:34 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f6:44:3e:dd:b6:54:83:c3:8f:cb:82:59:e5:52:be:c1:45:3e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 20:03:34 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=9576870d2c5c3b7e429a936facc0e6c5571772ab98bd9f54e983d4b85c0c6c58, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c4:f5:d8:fb:1c:a1:df:47:cd:69:72:b3:b7: 9f:d2:92:36:0f:52:0b:82:f9:65:6c:a8:75:6f:12: 76:8e:02:f9:f5:59:fe:01:f0:e5:ed:4a:d3:03:8d: ea:2a:de:df:24:57:91:0d:51:83:fd:a7:44:38:46: ee:b8:ca:41:95:d4:68:2c:1e:60:ac:f4:61:d7:ad: fe:3a:f6:3b:92:22:5b:4c:1b:81:82:d6:04:76:8c: 28:0a:b2:d3:31:c5:50:ac:75:13:48:15:c1:df:7b: 7f:d6:9d:89:88:9f:cd:14:31:b3:81:84:f4:3b:07: 8c:fe:f7:86:95:2d:6c:4c:c3:d2:a3:fa:47:08:44: 4b:14:da:b8:2b:30:74:a4:9b:c2:59:3e:44:5b:63: ca:2c:1d:c0:b5:eb:95:f1:19:77:d5:cf:7c:7f:c7: 66:56:d7:ae:b2:05:61:fa:42:9d:b3:bc:53:ca:ec: e8:2a:5d:31:c8:a2:10:d3:08:ee:35:61:8e:1b:19: fc:e7:76:f0:db:f7:c1:f9:7a:72:78:ad:90:a5:e6: 07:cc:0f:bf:5f:d2:bb:db:c8:3f:1e:10:5f:37:c6: e4:68:d7:c3:93:52:d7:24:11:26:fa:fb:f2:0b:a9: 92:d8:38:83:95:c0:39:80:14:71:09:d5:48:81:c7: fe:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A9:B6:D5:BC:89:3D:46:60:0E:08:98:EE:D6:C4:A0:50:03:D9:86 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/86d0cd8f-3c69-484d-bdba-26b289300215.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.223.0/24 Signature Algorithm: sha256WithRSAEncryption 13:d4:fb:11:36:25:fe:e8:90:1c:c2:a9:ca:bd:80:a7:d7:31: 53:a5:46:6b:ea:c5:ee:3e:0c:f7:f7:32:75:08:f4:51:79:c6: b0:b9:8e:d1:84:b2:1c:0b:15:34:87:8f:1c:fc:11:75:37:2b: 99:9d:32:d6:bd:11:70:10:6b:36:6c:bd:fd:c2:42:81:17:0f: 22:07:62:15:3d:25:1a:97:24:71:71:e9:23:d6:e3:90:fe:97: 6c:57:aa:54:f0:94:71:48:18:a6:87:4e:d2:d9:35:1c:64:97: a9:83:a3:d5:93:b0:dd:d3:96:60:d3:88:35:d4:b3:4c:86:97: a6:3e:14:18:b5:cb:9d:be:50:22:26:9c:ba:b2:a8:07:3a:83: da:38:6b:4f:22:00:08:10:58:6b:72:ea:a9:4a:65:31:08:06: 05:62:b1:28:9c:48:6c:d9:18:e6:4d:f4:99:87:0b:95:55:7a: 5b:f9:57:ea:9a:18:29:bd:26:92:bc:62:87:72:b4:df:ac:50: d8:e5:e4:bc:2b:aa:fe:33:65:e2:cf:db:e5:40:ac:28:8b:95: 47:47:29:b2:ec:08:fe:e4:b6:17:ff:a3:d9:f7:0d:67:3f:bb: 13:98:8f:86:42:42:c1:44:03:3b:9b:1e:b6:69:0a:8b:d1:a3: 52:2a:14:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT/ZEPt22VIPDj8uCWeVSvsFFPnEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjAwMzM0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTc2ODcwZDJjNWMzYjdlNDI5YTkzNmZhY2MwZTZjNTU3 MTc3MmFiOThiZDlmNTRlOTgzZDRiODVjMGM2YzU4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDexPXY+xyh30fNaXKzt5/SkjYPUguC+WVsqHVvEnaOAvn1 Wf4B8OXtStMDjeoq3t8kV5ENUYP9p0Q4Ru64ykGV1GgsHmCs9GHXrf469juSIltM G4GC1gR2jCgKstMxxVCsdRNIFcHfe3/WnYmIn80UMbOBhPQ7B4z+94aVLWxMw9Kj +kcIREsU2rgrMHSkm8JZPkRbY8osHcC165XxGXfVz3x/x2ZW166yBWH6Qp2zvFPK 7OgqXTHIohDTCO41YY4bGfzndvDb98H5enJ4rZCl5gfMD79f0rvbyD8eEF83xuRo 18OTUtckESb6+/ILqZLYOIOVwDmAFHEJ1UiBx/4tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu6m21byJPUZgDgiY7tbEoFAD2YYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg2ZDBjZDhmLTNjNjktNDg0ZC1iZGJhLTI2YjI4OTMwMDIxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpN8wDQYJKoZIhvcNAQELBQADggEBABPU+xE2Jf7okBzCqcq9gKfXMVOl Rmvqxe4+DPf3MnUI9FF5xrC5jtGEshwLFTSHjxz8EXU3K5mdMta9EXAQazZsvf3C QoEXDyIHYhU9JRqXJHFx6SPW45D+l2xXqlTwlHFIGKaHTtLZNRxkl6mDo9WTsN3T lmDTiDXUs0yGl6Y+FBi1y52+UCImnLqyqAc6g9o4a08iAAgQWGty6qlKZTEIBgVi sSicSGzZGOZN9JmHC5VVelv5V+qaGCm9JpK8YodytN+sUNjl5Lwrqv4zZeLP2+VA rCiLlUdHKbLsCP7kthf/o9n3DWc/uxOYj4ZCQsFEAzubHrZpCovRo1IqFKk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:57:49 2025 by rpki-client